From a9672ccecc6dec95036f3452517945e57120e8b0 Mon Sep 17 00:00:00 2001
From: David De Smet <2607383+daviddesmet@users.noreply.github.com>
Date: Sat, 22 Jun 2024 19:59:18 -0600
Subject: [PATCH] fix: validations from Newtonsoft.Json removal

---
 src/Paseto/Validators/BaseValidator.cs        | 11 ++-
 src/Paseto/Validators/DateValidator.cs        | 76 +++++++++++++++++++
 src/Paseto/Validators/EqualValidator.cs       |  8 --
 .../Validators/ExpirationTimeValidator.cs     | 49 ++----------
 src/Paseto/Validators/IssuedAtValidator.cs    | 49 ++----------
 src/Paseto/Validators/NotBeforeValidator.cs   | 49 ++----------
 tests/Paseto.Tests/PasetoBuilderTests.cs      | 47 ++++++++++++
 7 files changed, 148 insertions(+), 141 deletions(-)
 create mode 100644 src/Paseto/Validators/DateValidator.cs

diff --git a/src/Paseto/Validators/BaseValidator.cs b/src/Paseto/Validators/BaseValidator.cs
index 8c48ccd..4aec35d 100644
--- a/src/Paseto/Validators/BaseValidator.cs
+++ b/src/Paseto/Validators/BaseValidator.cs
@@ -1,11 +1,12 @@
 namespace Paseto.Validators;
 
 using System;
+using System.Text.Json;
 
 /// <summary>
 /// The Base Validator.
 /// </summary>
-/// <seealso cref="Paseto.Validation.IPasetoPayloadValidator" />
+/// <seealso cref="IPasetoPayloadValidator" />
 public abstract class BaseValidator : IPasetoPayloadValidator
 {
     /// <summary>
@@ -38,4 +39,12 @@ public abstract class BaseValidator : IPasetoPayloadValidator
     /// <param name="expected">The optional expected value.</param>
     /// <returns><c>true</c> if the specified value is valid; otherwise, <c>false</c>.</returns>
     public abstract bool IsValid(IComparable expected = null);
+
+    internal static object GetValueFromJsonElement(JsonElement element) => element.ValueKind switch
+    {
+        JsonValueKind.Number => element.GetDouble(),
+        JsonValueKind.String => element.GetString(),
+        JsonValueKind.True or JsonValueKind.False => element.GetBoolean(),
+        _ => element.GetRawText().Trim('"')
+    };
 }
diff --git a/src/Paseto/Validators/DateValidator.cs b/src/Paseto/Validators/DateValidator.cs
new file mode 100644
index 0000000..39bd8fd
--- /dev/null
+++ b/src/Paseto/Validators/DateValidator.cs
@@ -0,0 +1,76 @@
+namespace Paseto.Validators;
+
+using System;
+using System.Text.Json;
+using Paseto.Validators.Internal;
+
+/// <summary>
+/// The Base Date Validator.
+/// </summary>
+/// <seealso cref="IPasetoPayloadValidator" />
+public abstract class DateValidator : BaseValidator
+{
+    /// <summary>
+    /// Initializes a new instance of the <see cref="DateValidator"/> class.
+    /// </summary>
+    /// <param name="payload">The payload.</param>
+    public DateValidator(PasetoPayload payload) : base(payload) { }
+
+    /// <summary>
+    /// Validates the input value against the provided optional expected value. Throws an exception if not valid.
+    /// </summary>
+    /// <param name="value">The input value to validate.</param>
+    /// <param name="expected">The optional expected value.</param>
+    public abstract void ValidateDate(IComparable value, IComparable expected = null);
+
+    /// <summary>
+    /// Validates the payload against the provided optional expected value. Throws an exception if not valid.
+    /// </summary>
+    /// <param name="expected">The optional expected value.</param>
+    /// <exception cref="PasetoTokenValidationException">
+    /// Token has expired.
+    /// </exception>
+    public override void Validate(IComparable expected = null)
+    {
+        if (!Payload.TryGetValue(ClaimName, out var value))
+            throw new PasetoTokenValidationException($"Claim '{ClaimName}' not found");
+
+        DateTime exp;
+        try
+        {
+            if (value is JsonElement json)
+                value = GetValueFromJsonElement(json);
+
+            if (value is string s)
+                exp = DateTimeOffset.Parse(s).UtcDateTime;
+            else
+                exp = Convert.ToDateTime(value);
+        }
+        catch (Exception)
+        {
+            throw new PasetoTokenValidationException($"Claim '{ClaimName}' must be a DateTime");
+        }
+
+        expected ??= DateTime.UtcNow;
+
+        ValidateDate(exp, expected);
+    }
+
+    /// <summary>
+    /// Validates the payload against the provided optional expected value.
+    /// </summary>
+    /// <param name="expected">The optional expected value.</param>
+    /// <returns><c>true</c> if the specified value is valid; otherwise, <c>false</c>.</returns>
+    public override bool IsValid(IComparable expected = null)
+    {
+        try
+        {
+            Validate(expected);
+            return true;
+        }
+        catch (Exception)
+        {
+            return false;
+        }
+    }
+}
\ No newline at end of file
diff --git a/src/Paseto/Validators/EqualValidator.cs b/src/Paseto/Validators/EqualValidator.cs
index daec964..80c5dbb 100644
--- a/src/Paseto/Validators/EqualValidator.cs
+++ b/src/Paseto/Validators/EqualValidator.cs
@@ -79,12 +79,4 @@ public override bool IsValid(IComparable expected = null)
             return false;
         }
     }
-
-    private static object GetValueFromJsonElement(JsonElement element) => element.ValueKind switch
-    {
-        JsonValueKind.Number => element.GetDouble(),
-        JsonValueKind.String => element.GetString(),
-        JsonValueKind.True or JsonValueKind.False => element.GetBoolean(),
-        _ => element.GetRawText().Trim('"')
-    };
 }
diff --git a/src/Paseto/Validators/ExpirationTimeValidator.cs b/src/Paseto/Validators/ExpirationTimeValidator.cs
index 2d6f142..462e916 100644
--- a/src/Paseto/Validators/ExpirationTimeValidator.cs
+++ b/src/Paseto/Validators/ExpirationTimeValidator.cs
@@ -6,8 +6,8 @@
 /// <summary>
 /// The ExpirationTime Validator. This class cannot be inherited.
 /// </summary>
-/// <seealso cref="Paseto.Validators.BaseValidator" />
-public sealed class ExpirationTimeValidator : BaseValidator
+/// <seealso cref="Paseto.Validators.DateValidator" />
+public sealed class ExpirationTimeValidator : DateValidator
 {
     /// <summary>
     /// Initializes a new instance of the <see cref="ExpirationTimeValidator"/> class.
@@ -21,49 +21,10 @@ public ExpirationTimeValidator(PasetoPayload payload) : base(payload) { }
     /// <value>The name of the claim.</value>
     public override string ClaimName => PasetoRegisteredClaimNames.ExpirationTime;
 
-    /// <summary>
-    /// Validates the payload against the provided optional expected value. Throws an exception if not valid.
-    /// </summary>
-    /// <param name="expected">The optional expected value.</param>
-    /// <exception cref="PasetoTokenValidationException">
-    /// Token has expired.
-    /// </exception>
-    public override void Validate(IComparable expected = null)
+    /// <inheritdoc />
+    public override void ValidateDate(IComparable value, IComparable expected = null)
     {
-        if (!Payload.TryGetValue(ClaimName, out var value))
-            throw new PasetoTokenValidationException($"Claim '{ClaimName}' not found");
-
-        DateTime exp;
-        try
-        {
-            exp = Convert.ToDateTime(value);
-        }
-        catch (Exception)
-        {
-            throw new PasetoTokenValidationException($"Claim '{ClaimName}' must be a DateTime");
-        }
-
-        expected ??= DateTime.UtcNow;
-
-        if (Comparer.GetComparisonResult(exp, expected) < 0) // expected >= exp
+        if (Comparer.GetComparisonResult(value, expected) < 0) // expected >= exp
             throw new PasetoTokenValidationException("Token has expired");
     }
-
-    /// <summary>
-    /// Validates the payload against the provided optional expected value.
-    /// </summary>
-    /// <param name="expected">The optional expected value.</param>
-    /// <returns><c>true</c> if the specified value is valid; otherwise, <c>false</c>.</returns>
-    public override bool IsValid(IComparable expected = null)
-    {
-        try
-        {
-            Validate(expected);
-            return true;
-        }
-        catch (Exception)
-        {
-            return false;
-        }
-    }
 }
diff --git a/src/Paseto/Validators/IssuedAtValidator.cs b/src/Paseto/Validators/IssuedAtValidator.cs
index 4d30c6c..1f8c61d 100644
--- a/src/Paseto/Validators/IssuedAtValidator.cs
+++ b/src/Paseto/Validators/IssuedAtValidator.cs
@@ -6,8 +6,8 @@
 /// <summary>
 /// The NotAfter Validator. This class cannot be inherited.
 /// </summary>
-/// <seealso cref="Paseto.Validators.BaseValidator" />
-public sealed class IssuedAtValidator : BaseValidator
+/// <seealso cref="Paseto.Validators.DateValidator" />
+public sealed class IssuedAtValidator : DateValidator
 {
     /// <summary>
     /// Initializes a new instance of the <see cref="IssuedAtValidator"/> class.
@@ -21,49 +21,10 @@ public IssuedAtValidator(PasetoPayload payload) : base(payload) { }
     /// <value>The name of the claim.</value>
     public override string ClaimName => PasetoRegisteredClaimNames.IssuedAt;
 
-    /// <summary>
-    /// Validates the payload against the provided optional expected value. Throws an exception if not valid.
-    /// </summary>
-    /// <param name="expected">The optional expected value.</param>
-    /// <exception cref="PasetoTokenValidationException">
-    /// Token is not yet valid.
-    /// </exception>
-    public override void Validate(IComparable expected = null)
+    /// <inheritdoc />
+    public override void ValidateDate(IComparable value, IComparable expected = null)
     {
-        if (!Payload.TryGetValue(ClaimName, out var value))
-            throw new PasetoTokenValidationException($"Claim '{ClaimName}' not found");
-
-        DateTime iat;
-        try
-        {
-            iat = Convert.ToDateTime(value);
-        }
-        catch (Exception)
-        {
-            throw new PasetoTokenValidationException($"Claim '{ClaimName}' must be a DateTime");
-        }
-
-        expected ??= DateTime.UtcNow;
-
-        if (Comparer.GetComparisonResult(iat, expected) > 0) // expected >= iat
+        if (Comparer.GetComparisonResult(value, expected) > 0) // expected >= iat
             throw new PasetoTokenValidationException("Token is not yet valid");
     }
-
-    /// <summary>
-    /// Validates the payload against the provided optional expected value.
-    /// </summary>
-    /// <param name="expected">The optional expected value.</param>
-    /// <returns><c>true</c> if the specified value is valid; otherwise, <c>false</c>.</returns>
-    public override bool IsValid(IComparable expected = null)
-    {
-        try
-        {
-            Validate(expected);
-            return true;
-        }
-        catch (Exception)
-        {
-            return false;
-        }
-    }
 }
\ No newline at end of file
diff --git a/src/Paseto/Validators/NotBeforeValidator.cs b/src/Paseto/Validators/NotBeforeValidator.cs
index fd8caac..007cfe1 100644
--- a/src/Paseto/Validators/NotBeforeValidator.cs
+++ b/src/Paseto/Validators/NotBeforeValidator.cs
@@ -6,8 +6,8 @@
 /// <summary>
 /// The NotBefore Validator. This class cannot be inherited.
 /// </summary>
-/// <seealso cref="Paseto.Validators.BaseValidator" />
-public sealed class NotBeforeValidator : BaseValidator
+/// <seealso cref="Paseto.Validators.DateValidator" />
+public sealed class NotBeforeValidator : DateValidator
 {
     /// <summary>
     /// Initializes a new instance of the <see cref="NotBeforeValidator"/> class.
@@ -21,49 +21,10 @@ public NotBeforeValidator(PasetoPayload payload) : base(payload) { }
     /// <value>The name of the claim.</value>
     public override string ClaimName => PasetoRegisteredClaimNames.NotBefore;
 
-    /// <summary>
-    /// Validates the payload against the provided optional expected value. Throws an exception if not valid.
-    /// </summary>
-    /// <param name="expected">The optional expected value.</param>
-    /// <exception cref="PasetoTokenValidationException">
-    /// Token is not yet valid.
-    /// </exception>
-    public override void Validate(IComparable expected = null)
+    /// <inheritdoc />
+    public override void ValidateDate(IComparable value, IComparable expected = null)
     {
-        if (!Payload.TryGetValue(ClaimName, out var value))
-            throw new PasetoTokenValidationException($"Claim '{ClaimName}' not found");
-
-        DateTime nbf;
-        try
-        {
-            nbf = Convert.ToDateTime(value);
-        }
-        catch (Exception)
-        {
-            throw new PasetoTokenValidationException($"Claim '{ClaimName}' must be a DateTime");
-        }
-
-        expected ??= DateTime.UtcNow;
-
-        if (Comparer.GetComparisonResult(nbf, expected) >= 0) // expected <= nbf
+        if (Comparer.GetComparisonResult(value, expected) >= 0) // expected <= nbf
             throw new PasetoTokenValidationException("Token is not yet valid");
     }
-
-    /// <summary>
-    /// Validates the payload against the provided optional expected value.
-    /// </summary>
-    /// <param name="expected">The optional expected value.</param>
-    /// <returns><c>true</c> if the specified value is valid; otherwise, <c>false</c>.</returns>
-    public override bool IsValid(IComparable expected = null)
-    {
-        try
-        {
-            Validate(expected);
-            return true;
-        }
-        catch (Exception)
-        {
-            return false;
-        }
-    }
 }
diff --git a/tests/Paseto.Tests/PasetoBuilderTests.cs b/tests/Paseto.Tests/PasetoBuilderTests.cs
index e8d03d1..6388b61 100644
--- a/tests/Paseto.Tests/PasetoBuilderTests.cs
+++ b/tests/Paseto.Tests/PasetoBuilderTests.cs
@@ -594,4 +594,51 @@ public void ShouldSucceedOnEncodeToParsekWhenIsPublicPurposeAndSecretAsymmetricK
         parsek.Should().StartWith($"k{(int)version}.secret");
         parsek.Split('.').Should().HaveCount(3);
     }
+
+    [Theory(DisplayName = "Should succeed on Decoding with Date Validations")]
+    [InlineData(ProtocolVersion.V1)]
+    [InlineData(ProtocolVersion.V2)]
+    [InlineData(ProtocolVersion.V3)]
+    [InlineData(ProtocolVersion.V4)]
+    public void ShouldSucceedOnDecodingWithDateValidations(ProtocolVersion version)
+    {
+        const Purpose purpose = Purpose.Public;
+        var keyLength = version switch
+        {
+            ProtocolVersion.V1 => 0,
+            ProtocolVersion.V2 => 32,
+            ProtocolVersion.V3 => 32,
+            ProtocolVersion.V4 => 32,
+            _ => throw new ArgumentOutOfRangeException(nameof(version))
+        };
+
+        var sharedKey = new byte[keyLength];
+        RandomNumberGenerator.Fill(sharedKey);
+
+        var keyPair = new PasetoBuilder()
+            .Use(version, purpose)
+            .GenerateAsymmetricKeyPair(sharedKey);
+
+        var now = DateTime.UtcNow;
+
+        var encoded = new PasetoBuilder()
+            .Use(version, purpose)
+            .WithSecretKey([.. keyPair.SecretKey.Key.Span])
+            .IssuedAt(now.AddSeconds(-10))
+            .Expiration(now.AddHours(1))
+            .ValidFrom(now.AddSeconds(-10))
+            .Encode();
+
+        var validationParameters = new PasetoTokenValidationParameters
+        {
+            ValidateLifetime = true
+        };
+
+        var decoded = new PasetoBuilder()
+            .Use(version, purpose)
+            .WithPublicKey([.. keyPair.PublicKey.Key.Span])
+            .Decode(encoded, validationParameters);
+
+        decoded.IsValid.Should().BeTrue();
+    }
 }